From ac7ef16c42a1d0a56148aebeae4103dee219a880 Mon Sep 17 00:00:00 2001 From: punkwalker Date: Mon, 22 Apr 2024 17:55:48 +0000 Subject: [PATCH] Amends migrate to access entry documentation --- userdocs/src/usage/access-entries.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/userdocs/src/usage/access-entries.md b/userdocs/src/usage/access-entries.md index 52c2f8d76b0..e5573436021 100644 --- a/userdocs/src/usage/access-entries.md +++ b/userdocs/src/usage/access-entries.md @@ -147,7 +147,7 @@ eksctl delete accessentry -f config.yaml ### Migrate IAM identity mappings to access entries -The user can migrate their existing IAM identities from configmap to access entries by running the following: +The user can migrate their existing IAM identities from `aws-auth` configmap to access entries by running the following: ```shell eksctl utils migrate-to-access-entry --cluster my-cluster --target-authentication-mode @@ -155,7 +155,7 @@ eksctl utils migrate-to-access-entry --cluster my-cluster --target-authenticatio When `--target-authentication-mode` flag is set to `API`, authentication mode is switched to `API` mode (skipped if already in `API` mode), IAM identity mappings will be migrated to access entries, and `aws-auth` configmap is deleted from the cluster. -When `--target-authentication-mode` flag is set to `API_AND_CONFIG_MAP`, authentication mode is switched to `API_AND_CONFIG_MAP` mode (skipped if already in `API_AND_CONFIG_MAP` mode), IAM identity mappings will be migrated to access entries. +When `--target-authentication-mode` flag is set to `API_AND_CONFIG_MAP`, authentication mode is switched to `API_AND_CONFIG_MAP` mode (skipped if already in `API_AND_CONFIG_MAP` mode), IAM identity mappings will be migrated to access entries, but `aws-auth` configmap is preserved. ???+ note When `--target-authentication-mode` flag is set to `API`, this command will not update authentication mode to `API` mode if `aws-auth` configmap has one of the below constraints.